RP 테넌트 제한 backend 구현

backend/internal/handler/dev_handler.go

@@ -1528,6 +1528,11 @@ func (h *DevHandler) CreateClient(c *fiber.Ctx) error {
 	}
 	metadata["status"] = status
 	metadata["created_at"] = time.Now().Format(time.RFC3339)
+	var err error
+	metadata, err = normalizeClientTenantAccessMetadata(metadata)
+	if err != nil {
+		return errorJSON(c, fiber.StatusBadRequest, err.Error())
+	}
 
 	tokenAuthMethod := strings.TrimSpace(valueOr(req.TokenEndpointAuthMethod, ""))
 	if tokenAuthMethod == "" {
@@ -1716,6 +1721,10 @@ func (h *DevHandler) UpdateClient(c *fiber.Ctx) error {
 		}
 		metadata["status"] = status
 	}
+	metadata, err = normalizeClientTenantAccessMetadata(metadata)
+	if err != nil {
+		return errorJSON(c, fiber.StatusBadRequest, err.Error())
+	}
 	resolvedClientType := currentSummary.Type
 	if clientType != "" {
 		resolvedClientType = clientType